machine_setup/ansible/roles/jail_bastion/files/nginx.conf
2024-10-04 21:22:55 -04:00

55 lines
1.1 KiB
Nginx Configuration File

worker_processes auto;
user www www;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
types {
text/plain log;
}
sendfile on;
tcp_nopush on;
tcp_nodelay on;
gzip on;
include conf.d/headers.include;
upstream inner {
server 10.215.2.2:8081;
keepalive 4;
}
server {
listen 443 quic reuseport;
listen [::]:443 quic reuseport;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name stuff.fizz.buzz;
include conf.d/tls_settings.include;
# RSA
ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;
# Nginx by default only allows file uploads up to 1M in size
client_max_body_size 50M;
location / {
auth_basic "Stuff";
auth_basic_user_file conf.d/htpasswd;
proxy_pass http://inner;
include conf.d/proxy.include;
}
}
}